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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1 . (Currently Amended) A method of grouping entries in a directory server, said directory 
server configur e d to contain comprising roles, the method comprising; th e st e ps of: 

defining a plurality of entries in the directory server, wherein at least one the plurality of 
entries are associated with an enumerated role; 

cr e ating defining an enumerated role entry corresponding to the enumerated role, wherein 
the enumerated role entry comprises a plurality of group member attributes and the at 
least one of the plurality of entries is associated with at least one of the plurality of 
group member attributes by a ss igning a plurality of e ntri e s to th e e num e rat e d rol e , 
whereby th e plurality of entri e s poss e sses the enum e rat e d rol e; 

determining what which of the plurality of entries possess the enumerated role by 
querying the plurality of group member attributes in the enumerated role entry ; and 

providing the plurality of entries that possess the enumerated role to a client^ 

wherein the at least one of the plurality of entries comprising the enumerated role is 
within a scope of the enumerated role entry . 

2. (Cancelled) 

3. (Currently Amended) The method as in claim 1 , further comprising; th e st e p of 

if an entry that possesses th e e num e rat e d role in a n e st e d rol e , th e n rejecting the at least 
one of the plurality of entries that possess the enumerated role if the at least one of the 
plurality of entries possesses a nested role that e ntry without furth e r proc e ssing of th e 
entry. 

4. (Cancelled) 

5. (Cancelled) 

6. (Currently Amended) An apparatus A directory server, comprising: 

a plurality of entries in the directory server, wherein at least one the plurality of entries 
comprises an enumerated role; 
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a first compon e nt cr e ating an enumerated role entry corresponding to the enumerated 
role, wherein the enumerated role entry comprises a plurality of group member 
attributes and the at least one of the plurality of entries is associated with at least one 
of the plurality of group member attributes by assigning a plurality of e ntri e s to th e 
e num e rat e d rol e , wh e r e by th e plurality of entri e s poss e ss e s th e e num e rat e d rol e ; 

functionality to determine the first compon e nt d e t e rmining what which of the plurality of 
entries possess the enumerated role by querying the plurality of group member 
attributes in the enumerated role entry ; and 

functionality to provide the first component providing the plurality of entries that possess 
the enumerated role to a client second compon e nt , 

wherein the at least one of the plurality of entries comprising the enumerated role is 
within a scope of the enumerated role entry . 

7. (Cancelled) 

8. (Currently Amended) The apparatus directory server as in claim 6, further comprising 
functionality to the st e p of 

a third compon e nt coupled to th e dir e ctory s e rv e r configured to reject the at least one of 
the plurality of entries that possess the enumerated role if the at least one of the 
plurality of entries possesses a nested role, an entry without further proc e ssing if th e 
entry that poss e ss e s the enum e rated role in a n e st e d rol e . 

9. (Cancelled) 

10. (Cancelled) 

11. (New) The method as in claim 1, wherein the directory server support Lightweight 
Directory Access Protocol (LDAP). 

12. (New) The directory server as in claim 6, wherein the directory server support 
Lightweight Directory Access Protocol (LDAP). 
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